checking authorization for view-by-depid